https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:16:43.150093+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08705 bdu:2024-08705 2026-10-02T23:16:43.565464+00:00 bdu:2024-08705 https://cve.radiocsirt.org/vuln/certfr-2021-avi-539 certfr-2021-avi-539 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T23:16:43.565515+00:00 certfr-2021-avi-539 https://cve.radiocsirt.org/vuln/euvd-2026-99342 EUVD-2026-99342 2026-10-02T23:16:43.565535+00:00 EUVD-2026-99342 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3577 fkie_cve-2014-3577 2026-10-02T23:16:43.565547+00:00

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.

 https://cve.radiocsirt.org/vuln/ghsa-cfh5-3ghh-wfjx GHSA-cfh5-3ghh-wfjx — Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient 2026-10-02T23:16:43.565579+00:00

Affected: Maven: org.apache.httpcomponents:httpclient

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.

 https://cve.radiocsirt.org/vuln/gsd-2014-3577 gsd-2014-3577 2026-10-02T23:16:43.565605+00:00 gsd-2014-3577 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1873-1 openSUSE-SU-2020:1873-1 — Security update for apache-commons-httpclient 2026-10-02T23:16:43.565616+00:00

Security update for apache-commons-httpclient

 https://cve.radiocsirt.org/vuln/rhsa-2014:1082 RHSA-2014:1082 — Red Hat Security Advisory: thermostat1-httpcomponents-client security update 2026-10-02T23:16:43.565635+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

 https://cve.radiocsirt.org/vuln/suse-su-2020:3149-1 SUSE-SU-2020:3149-1 — Security update for apache-commons-httpclient 2026-10-02T23:16:43.565651+00:00

Security update for apache-commons-httpclient

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3577 UBUNTU-CVE-2014-3577 2026-10-02T23:16:43.565666+00:00

Affected: Ubuntu:14.04:LTS: commons-httpclient, Ubuntu:14.04:LTS: httpcomponents-client

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-02T23:16:43.565689+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.